19fe3caf336eee80a4e444f2cf9fbcb0d0533591f887a255fdb806c9a6621938

Sharing

Copy URL

Twitter E-mail

General

Target

19fe3caf336eee80a4e444f2cf9fbcb0d0533591f887a255fdb806c9a6621938
Size

212KB
MD5

652d78dd0fdccd3dcac96a08db22a430
SHA1

de7c3adc636e389d9fa4093c45cb104dc5bcfbbd
SHA256

19fe3caf336eee80a4e444f2cf9fbcb0d0533591f887a255fdb806c9a6621938
SHA512

ae2617668096a2d25c604bacfca76a5a2f6179c78c724d40636126297ceedcfac48bf1c82b78269e1cccdab4aef033b2f085ecd3e885c589da154b07d5077627
SSDEEP

6144:gPUZ1jxhINfRN02uxJekQ4ARtXFWuVD1GbNAd:gPSTuDwx0kQjtXFWuR1GbOd

Score

N/A

Malware Config

Signatures

Files

19fe3caf336eee80a4e444f2cf9fbcb0d0533591f887a255fdb806c9a6621938
.exe windows x86

ab4aa11ae8320ead77ce7c7b320b7775

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
GetProcessHeap
GetOEMCP
LoadLibraryW
lstrlenA
CloseHandle
GetEnvironmentStringsW
GetUserDefaultLCID
GetCurrentProcess
GetSystemDefaultLCID
HeapFree
lstrcmpA
FreeResource
LockResource
MultiByteToWideChar
CreateFileA
LoadResource
FindResourceA
QueryPerformanceCounter
GetLocalTime
HeapAlloc
GetCurrentProcessId
SetUnhandledExceptionFilter
lstrcpyA
WideCharToMultiByte
GetLocaleInfoW
DeviceIoControl
QueryDosDeviceA
GetVolumeInformationA
GetTickCount
GetSystemTimeAsFileTime
SetLastError

raschap

RasCpEnumProtocolIds
RasEapGetInfo
RasCpGetInfo

rasctrs

CloseRasPerformanceData
OpenRasPerformanceData
CollectRasPerformanceData

rasman

RasAddNotification
IsRasmanProcess
RasActivateRouteEx
RasAddConnectionPort
RasAllocateRoute

rasdlg

RasPhonebookDlgW
DwTerminalDlg
GetRasDialOutProtocols
RasSrvAddPropPages
RouterEntryDlgW
RasUserGetManualDial
RasAutodialQueryDlgA
RasSrvIsConnectionConnected
RouterEntryDlgA
RasSrvHangupConnection
RasDialDlgW
RasSrvIsServiceRunning
RasUserPrefsDlg
RasUserEnableManualDial
RasAutodialQueryDlgW
RasSrvInitializeService
RasEntryDlgW
RasSrvCleanupService
RasSrvAllowConnectionsConfig
RasPhonebookDlgA
RasDialDlgA
RasEntryDlgA
RasSrvEnumConnections

rasapi32

RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW

advapi32

RegOpenKeyExA
RegOpenKeyW
RegQueryValueExA
RegCloseKey
RegQueryValueExW

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab4aa11ae8320ead77ce7c7b320b7775

Headers

File Characteristics

Imports

kernel32

raschap

rasctrs

rasman

rasdlg

rasapi32

advapi32

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 21KB - Virtual size: 2.0MB

.zdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 21KB - Virtual size: 2.0MB

.zdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB